In the US, PNR data obtained from commercial carriers is stored in the Automated Targeting System. Just as in the EU, PNRs are depersonalized after six months. In five years, records are moved to a dormant database where they remain available for another ten years — for security purposes only.